how to remove weknow.ac virus

I am still having problems...I am sure it is a user error, but I need some help...This is what my Terminal looks like...Is this correct? Then I just close out my chrome? Do I have to uninstall it? And close out of my Terminal?

Last login: Fri Oct 26 20:26:01 on ttys000

Susans-iMac:~ SAMathis$ DefaultSearchProviderEnabled

-bash: DefaultSearchProviderEnabled: command not found

Susans-iMac:~ SAMathis$ DefaultSearchProviderName

-bash: DefaultSearchProviderName: command not found

Susans-iMac:~ SAMathis$ DefaultSearchProviderNewTabURL

-bash: DefaultSearchProviderNewTabURL: command not found

Susans-iMac:~ SAMathis$ DefaultSearchProviderSearchURL

-bash: DefaultSearchProviderSearchURL: command not found

Susans-iMac:~ SAMathis$ HomepageIsNewTabPage

-bash: HomepageIsNewTabPage: command not found

Susans-iMac:~ SAMathis$ HomepageLocation

-bash: HomepageLocation: command not found

Susans-iMac:~ SAMathis$ NewTabPageLocation

-bash: NewTabPageLocation: command not found

Susans-iMac:~ SAMathis$

Susans-iMac:~ SAMathis$

Ok you are going to hate this answer. I think the directions given. where using commands from the c shell. You terminal is telling you that you are using the bash shell and the commands are not found in that shell

enter

chsh -s /bin/tcsh

and try again

You need to open the "Terminal" application (use the search functionality at the top-right to find it). Then copy and paste, one by one, the commands from my above post into the terminal prompt, hitting enter after pasting each.

All I had to do then was use the command line to delete / modify the affected policies:

defaults write com.google.Chrome HomepageIsNewTabPage -bool false

defaults write com.google.Chrome NewTabPageLocation -string "https://www.google.com/"

defaults write com.google.Chrome HomepageLocation -string "https://www.google.com/"

defaults delete com.google.Chrome DefaultSearchProviderSearchURL

defaults delete com.google.Chrome DefaultSearchProviderNewTabURL

defaults delete com.google.Chrome DefaultSearchProviderName

The changes will not take effect until you restart Chrome.

I recommend following some of the other pieces of advice in this thread, ie definitely do a malware scan too.

Hello ChanelCinq,

After reading so many positive replies I got excited as well. I am getting stuck at typing the mentioned commands in Terminal and it looks as below for me:

Last login: Sun Nov 11 17:06:18 on ttys000

Jigneshs-MBP:~ jiggy$ defaults write com.google.Chrome HomepageIsNewTabPage -bool false

Jigneshs-MBP:~ jiggy$

Jigneshs-MBP:~ jiggy$ defaults write com.google.Chrome NewTabPageLocation -string "https://www.google.com/"

Jigneshs-MBP:~ jiggy$

Jigneshs-MBP:~ jiggy$ defaults write com.google.Chrome HomepageLocation -string "https://www.google.com/"

Jigneshs-MBP:~ jiggy$

Jigneshs-MBP:~ jiggy$ defaults delete com.google.Chrome DefaultSearchProviderSearchURL

2018-11-11 17:13:30.021 defaults[6240:94366]

Domain (com.google.Chrome) not found.

Defaults have not been changed.

Jigneshs-MBP:~ jiggy$

Jigneshs-MBP:~ jiggy$ defaults delete com.google.Chrome DefaultSearchProviderNewTabURL

defaults delete com.google.Chrome DefaultSearchProviderName

2018-11-11 17:13:30.080 defaults[6241:94370]

Domain (com.google.Chrome) not found.

Defaults have not been changed.

Jigneshs-MBP:~ jiggy$

Jigneshs-MBP:~ jiggy$ defaults delete com.google.Chrome DefaultSearchProviderName

2018-11-11 17:13:30.136 defaults[6243:94383]

Domain (com.google.Chrome) not found.

Defaults have not been changed.

Jigneshs-MBP:~ jiggy$

Looks like, I am unable to select correct Terminal for this to function. Can you please elaborate further on actual steps involving the use of Terminal? I would really appreciate your help with this as nothing else seem to work with this issue.

Thank you.

Actually it looks like the first three line worked.. Did you close Chrome and try it again?

The last three response terminal gave you look like no default was set... Not sure if that is good or bad but I would at least try Chrom again

I am currently facing the same issue where I have tried these terminal commands several times to no avail. It doesn’t seem to be affecting my safari browser but this is troublesome and frustrating. Someone please help.

You might try azhaan approach although it does require install addition software (not my fav approach)

When you say. "no avail". what error are you getting?

As I mentioned else where. commands given are written for C Shell family of shells. Apple has jumped between bash and tcsh

she'll is shown by "echo $SHELL"

It worked! I had tried everything. Thank you so much for the information. I followed it exactly as you stated and it cleaned the high jacker virus from my computer when using chrome. I really appreciate your post. Thank you.

Please use the manual instructions. Do not download anything.

weknow.ac uninstall

weknow.ac uninstall (2)

Thank you a lot. You saved my day!

Thank you, thank you.

Spent almost 3 hours working on this tonight and then I found you.

Thank you.

It is hard to get rid of weknow on Chrome. I read several posts, tried many ways, and spent days on it. As I recall, I did these too:

I spent days searching the web, tried a lot of ways, spent days on it. As I recall, I did these:

1. Click the "Chrome menu" (three horizontal lines) button and choose "Settings". In the "Search" section, click the "Manage search engines..." button. In the opened window, remove the unwanted Internet search engine by clicking the "X" button next to it. Select your preferred Internet search engine from the list and click the "Make default" button next to it.
2. Reset Google Chrome:

Start Google Chrome browser

In address box type (or copy-paste) chrome://settings/.

Scroll down and find Show advanced settings link.

Click on it and scroll down to the bottom again.

Click Reset settings button and click Reset to confirm.

Then, I did what I posted before: (Please note, I have a MacBook)

1. Click the magnifier on the top right corner of computer, type in “terminal” 

Use the command line to delete / modify the affected policies. You do this by opening up "Terminal" and copy and paste each of the following entries below. After you paste the first one, hit return, then past the next one until I had finished all 6 entries below:

defaults write com.google.Chrome HomepageIsNewTabPage -bool false

defaults write com.google.Chrome NewTabPageLocation -string "https://www.google.com/"

defaults write com.google.Chrome HomepageLocation -string "https://www.google.com/"

defaults delete com.google.Chrome DefaultSearchProviderSearchURL

defaults delete com.google.Chrome DefaultSearchProviderNewTabURL

defaults delete com.google.Chrome DefaultSearchProviderName

Quit Chrome and restart it, weknow.ac was gone. Good luck!

You may need to remove all Chrome plugins and extensions in the preferences before proceeding,

Quit from Chrome after doing that by selecting Quit Chrome in the Chrome menu or File menu.

Then run the Terminal commands. Lastly, relaunch Chrome holding the shift key down when you do, telling it you don’t want to reload the last page. Then go chrome://policy link. If that link is still showing other sites on the page, reload policies.

Thanks for that information, done it and it work, but just one thing, every once in a while it stills get reinstall again, even after the pop up window appears, I always say cancel to avoid install, but no matter what always gets installed, and have to use the commands you shared on the terminal, but the solution is just for a couple of days, since it reinstalls again and again, no matter what. Any help??

How to remove Weknow.ac redirect from Mac (Safari, Chrome, Firefox)